mailto
mailto is a Uniform Resource Identifier (URI) scheme for email addresses. It is used to produce hyperlinks on websites that allow users to send an email to a specific address directly from an HTML document, without having to copy it and entering it into an email client.
It was originally defined in Request for Comments (RFC) 2368, published in July 1998,[1] and refined in RFC 6068, published in October 2010.[2]
Examples
"mailto" can be used within an HTML document to generate a link for sending email:
<a href="mailto:someone@example.com">Send email</a>
Clicking on the hyperlink automatically opens the default email client, with the destination email address pre-filled.
It is possible to specify initial values for headers (e.g. subject, cc, etc.) and message body in the URL. Blanks, carriage returns, and linefeeds cannot be embedded but must be percent-encoded:[3]
<a href="mailto:someone@example.com?subject=This%20is%20the%20subject&cc=someone_else@example.com&body=This%20is%20the%20body">Send email</a>
Multiple addresses can be specified:[2]
<a href="mailto:someone@example.com,someoneelse@example.com">Send email</a>
The address can be omitted:
<a href="mailto:?to=&subject=mailto%20with%20examples&body=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FMailto">Share this knowledge...</a>
Security and privacy
 | This section needs additional citations for verification. (September 2015) |
A number of security issues are mentioned in RFC2368, however the greatest concern is robotic address harvesting. Mailto constructs are locatable within HTML pages by automated means which typically include the use of DOM constructs or regular expressions. Addresses harvested by such means are liable to be added to spammers' mass-mailing lists and thus to receive large amounts of unwanted mail.
While methods exist to "harden" mailto links against harvesting—address munging and JavaScript-based address obfuscation among them—these protections can be circumvented by sufficiently sophisticated harvesting robots. Other techniques, like walling the address behind a CAPTCHA or similar "humanity check", provide security on par with that available for other contact methods, most notably web forms, which experience similar challenges with preventing spam.
References
- ^ Hoffman, Paul; Masinter, Larry; Zawinski, Jamie (July 1998). "The mailto URL scheme". Retrieved 26 September 2015.
- ^ a b Duerst, Martin; Masinter, Larry; Zawinski, Jamie (October 2010). "The 'mailto' URI Scheme". Retrieved 26 September 2015.
- ^ "Creating hyperlinks § E-mail links". MDN Web Docs. Retrieved 2019-09-30.